Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v8Orkvbv0JeoOiND2V_GH3Jy9mg.roa
File: v8Orkvbv0JeoOiND2V_GH3Jy9mg.roa (raw, json)
Hash identifier: eBRYkTlO3gdEznV/SrZQR5/+A0lI/Ere/wes/GmjejI=
Subject key identifier: BF:C3:AB:92:F6:EF:D0:97:A8:3A:23:43:D9:5F:C6:1F:72:72:F6:68
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A0AE32ECA260769EB768A5969F9E2CEE11
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v8Orkvbv0JeoOiND2V_GH3Jy9mg.roa
Signing time: Thu 17 Sep 2026 07:09:27 +0000
ROA not before: Thu 17 Sep 2026 07:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62651
IP address blocks: 185.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:32:ec:a2:60:76:9e:b7:68:a5:96:9f:9e:2c:ee:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 17 07:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfc3ab92f6efd097a83a2343d95fc61f7272f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:03:93:5b:37:13:3a:00:6f:0f:11:c1:83:be:
40:4e:05:56:89:66:f8:1d:20:15:06:2a:d4:22:ea:
fa:ed:f1:6b:b7:d8:ee:64:d7:1f:8c:74:af:d5:f2:
7d:21:33:fb:a2:33:35:52:67:de:c3:2f:b5:eb:e7:
cc:1a:1e:7b:5d:f9:48:fa:ed:14:30:21:71:89:a7:
c0:ab:0c:c1:31:94:a1:37:e8:78:83:49:b0:7c:4a:
62:3c:fa:e9:13:d8:3e:a7:12:30:73:ad:08:a2:ea:
98:c7:7d:01:99:da:0f:c9:ab:21:aa:ea:da:ab:da:
b5:1b:58:1b:b0:3a:ca:3c:ec:20:9e:76:33:9d:bf:
71:1e:55:fb:50:cd:ab:70:5e:2f:29:51:13:f6:27:
d5:77:1a:cf:1d:3d:e1:42:5e:a7:5f:3b:7a:dd:65:
e7:5c:b2:63:1f:fb:fe:67:e8:93:bc:88:83:28:bf:
5d:f9:4c:2c:ac:d0:ba:40:0e:98:32:63:1c:c6:25:
b1:86:32:93:27:73:24:28:9c:2a:08:a7:cf:e8:81:
bf:04:fc:40:4f:3b:05:45:e0:1e:12:12:90:9a:f9:
18:13:93:db:5d:36:fc:9e:92:ff:1b:98:42:3c:ce:
ee:d4:dc:e9:24:49:6a:b0:15:00:cb:61:0c:a3:90:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:AB:92:F6:EF:D0:97:A8:3A:23:43:D9:5F:C6:1F:72:72:F6:68
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/v8Orkvbv0JeoOiND2V_GH3Jy9mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f3:6a:cd:b0:0e:70:55:ad:4c:7f:90:99:79:41:99:09:5b:
ab:86:94:cd:9b:2e:1f:bf:0c:18:55:ab:21:e5:d8:95:91:cf:
0b:43:7a:eb:04:f2:3d:d1:29:3e:7c:04:8e:c5:d2:a7:dd:7c:
2d:13:06:84:1c:b8:93:91:75:26:9b:f4:ec:44:56:e9:ee:0f:
85:d2:d1:f0:2f:56:27:64:2b:61:cb:58:d6:09:07:b8:01:2c:
28:49:69:3d:dd:8f:3c:a5:ab:10:df:73:69:24:c0:38:45:20:
9a:76:91:48:13:5c:8a:ce:49:c4:b1:5b:ad:f9:fd:39:19:49:
b0:99:d2:88:72:b1:b5:5e:52:24:ef:62:32:62:1f:e3:9f:53:
78:1b:8b:e4:75:68:2f:b8:4f:8a:c7:74:8b:09:54:80:29:15:
a9:5f:45:fb:81:08:6f:c2:d3:ba:b0:56:ca:d0:62:a6:1c:a8:
de:d2:e2:aa:90:a3:29:71:37:ef:e6:db:1f:d4:26:45:e6:ea:
7b:e5:ce:7c:fb:95:f8:73:13:a8:79:43:21:26:d6:b8:5c:84:
20:30:e1:96:5b:53:f3:ec:be:1c:99:92:14:ce:e7:af:5c:ab:
0b:1d:c2:3a:55:25:87:a2:51:95:a0:3d:00:80:85:13:98:7c:
a7:db:ac:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCuMuyiYHaet2illp+eLO4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjYwOTE3MDcwOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmMzYWI5MmY2ZWZkMDk3YTgzYTIzNDNkOTVmYzYxZjcyNzJmNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AOTWzcTOgBvDxHBg75ATgVWiWb4
HSAVBirUIur67fFrt9juZNcfjHSv1fJ9ITP7ojM1Umfewy+16+fMGh57XflI+u0U
MCFxiafAqwzBMZShN+h4g0mwfEpiPPrpE9g+pxIwc60IouqYx30BmdoPyashqura
q9q1G1gbsDrKPOwgnnYznb9xHlX7UM2rcF4vKVET9ifVdxrPHT3hQl6nXzt63WXn
XLJjH/v+Z+iTvIiDKL9d+UwsrNC6QA6YMmMcxiWxhjKTJ3MkKJwqCKfP6IG/BPxA
TzsFReAeEhKQmvkYE5PbXTb8npL/G5hCPM7u1NzpJElqsBUAy2EMo5APMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/Dq5L279CXqDojQ9lfxh9ycvZoMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvdjhPcmt2YnYwSmVvT2lORDJWX0dIM0p5OW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRftMA0G
CSqGSIb3DQEBCwUAA4IBAQAP82rNsA5wVa1Mf5CZeUGZCVurhpTNmy4fvwwYVash
5diVkc8LQ3rrBPI90Sk+fASOxdKn3XwtEwaEHLiTkXUmm/TsRFbp7g+F0tHwL1Yn
ZCthy1jWCQe4ASwoSWk93Y88pasQ33NpJMA4RSCadpFIE1yKzknEsVut+f05GUmw
mdKIcrG1XlIk72IyYh/jn1N4G4vkdWgvuE+Kx3SLCVSAKRWpX0X7gQhvwtO6sFbK
0GKmHKje0uKqkKMpcTfv5tsf1CZF5up75c58+5X4cxOoeUMhJta4XIQgMOGWW1Pz
7L4cmZIUzuevXKsLHcI6VSWHolGVoD0AgIUTmHyn26yD
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:24 2026 by rpki-client